19 matches found
EUVD-2017-1633
Malware in sbrugna...
EUVD-2017-1634
Malware in sbrugna...
CVE-2017-1002019
Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and eventform.php code do not sanitize input, this allows for blind SQL injection via the event parameter...
WordPress eventr SQL Injection Vulnerability
WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL server set up a personal blog site.WordPress eventr is an Indian software developer Binny VA for WordPress developed a blog event management plugin. A...
WordPress eventr 'event' parameter SQL injection vulnerability
WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL server set up a personal blog site.WordPress eventr is an Indian software developer Binny VA for WordPress developed a blog event management plugin. A...
CVE-2017-1002018
Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this allows for blind SQL injection via the event parameter...
Sql injection
Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and eventform.php code do not sanitize input, this allows for blind SQL injection via the event parameter...
Sql injection
Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this allows for blind SQL injection via the event parameter...
CVE-2017-1002019
Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and eventform.php code do not sanitize input, this allows for blind SQL injection via the event parameter...
CVE-2017-1002019
Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and eventform.php code do not sanitize input, this allows for blind SQL injection via the event parameter...
CVE-2017-1002018
Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this allows for blind SQL injection via the event parameter...
CVE-2017-1002019
The CVE tracks a vulnerability in the WordPress plugin EventR (v1.02.2): the edit.php and event_form.php code do not sanitize input, enabling blind SQL injection via the event parameter. Root cause is inadequate input sanitization; this can allow an attacker to execute arbitrary SQL commands rela...
CVE-2017-1002018
The CVE refers to a vulnerability in the WordPress plugin Eventr (version 1.02.2) where the edit.php and attendees.php input is not sanitized, allowing a blind SQL injection via the event parameter. Affected software: Eventr WordPress plugin. Root cause: unsanitized input leading to SQL injection...
CVE-2017-1002019
Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and eventform.php code do not sanitize input, this allows for blind SQL injection via the event parameter...
PT-2017-11008
Name of the Vulnerable Software and Affected Versions wordpress plugin eventr version 1.02.2 Description The issue arises from insufficient input sanitization in the edit.php form and event form.php code, allowing for blind SQL injection attacks via the event parameter. Recommendations For versio...
CVE-2017-1002019: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and eventform.php code do not sanitize input, this allows for blind SQL injection via the event parameter...
PT-2017-11007
Name of the Vulnerable Software and Affected Versions wordpress plugin eventr version 1.02.2 Description The issue concerns a lack of input sanitization in the edit.php form and attendees.php code, allowing for blind SQL injection via the event parameter. Recommendations For version 1.02.2, updat...
CVE-2017-1002018: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this allows for blind SQL injection via the event parameter...
